Compatibility Questionnaire: MMG Security, Inc. — Archive
Important: The OVAL Compatibility Program was moved to "archive" status in December 2009, and replaced with the "OVAL Adoption Program." Under the OVAL Adoption Program product validation is performed by an external organization, allowing the OVAL Team to focus on educating vendors on best practices regarding the use and implementation OVAL and on how OVAL can continue to evolve as needed by the community.
Refer to the OVAL Adoption Program section for addition information and to review all products and services listed.
Organizational Information
Name of Your Organization:
Web Site:
Product Information
Product/Service Name:
Compatible Categories:
OVAL Systems Characteristics Consumer
OVAL Definition Consumer
OVAL Results Producer
OVAL Results Consumer
Product/Service Home Page:
Product Accessibility
Language Version Indication
The reports generated by the program include the schema version, timestamp and name/version of the product that created the definitions, system characteristics, and results.
Approach for Correction of Errors
We maintain a public bug database that people can use to report issues with our software. The database is available at:
http://dev.mmgsecurity.com/bugs/
Once we have confirmed the bugs(s), we work with the bug reporter to test our fix(es). When we have a working fix we will make a new release available. Any bugfixes are noted in the release notes by ID in case people want to read more about the issue(s).
Users can then download and update their versions.
Compatibility Documentation
The documentation on OVAL and OVAL compatibility is available with the software. In Windows it's in our help file and for Linux it's available in the Sussen. Oval man page.
Language Support
UNIX sccs_test
Cisco IOS, HP-UX, Apple Macintosh, Sun Solaris tests
External variables
Finding Elements Using OVAL
The command line programs either output the results in XML or HTML format. That allows the user to see what definitions were consumed and the results.
You can also view the collected data and results from the reports section in the web console.
OVAL Content Importation Process Explanation
Statement of Compatibility
Have an authorized individual sign and date the following Compatibility Statement (required):
"As an authorized representative of my organization I agree that we will abide by all of the mandatory Compatibility Requirements as well as all of the additional mandatory Compatibility Requirements that are appropriate for our specific type of capability."
Name: | Loren Bandiera | |
Title: | Lead Developer, Sussen Project |
Statement of Accuracy
Have an authorized individual sign and date the following accuracy Statement (recommended):
"As an authorized representative of my organization and to the best of my knowledge, there are no errors in the correctness of our capability's use of OVAL schema and logic."
Name: | Loren Bandiera | |
Title: | Lead Developer, Sussen Project |
Statement on Follow-on Correctness Testing Support
Have an authorized individual sign and date the following statement about your organizations willingness to support correctness testing of other capabilities, which will be managed by the Reviewing Authority and kept to reasonable levels of effort for all involved. (required):
"As an authorized representative of my organization, we agree to support the Review Authority in follow-on correctness testing activities, where appropriate types of OVAL documents might need to be exchanged with other organizations attempting to prove the correctness of their capabilities."
Name: | Loren Bandiera | |
Title: | Lead Developer, Sussen Project |
Page Last Updated: December 17, 2009